IN THE SPECIFICATION 



Please amend the Specification as follows: 

Page 1, line 1 (Title of the Invention), please rewrite the Title of the Invention as 
follows: 

S e curity authorisation syst e m 
SECURITY AUTHORIZATION SYSTEM 

Page 1, lines 2-4, please rewrite this paragraph as follows: 
This invention relates to security systems and particularly to confining correct operation 
of functional apparatus to the presence of an authoris e d authorized user and more 
particularly to disabling functionmg apparatus separated from the authoris e d authorized 
user. 

Page 1, lines 5-8, please rewrite this paragraph as follows: 
The invention is concerned with apparatus which functions under the direct control of an 
operator as, or on behalf of, an authorised authorized user and in this respect, as least for 
convenience in discussion of the backgroxmd to the invention, a suitably authorised 
authorized operator and an authoris e d authorized user are considered synonymous, 
although they need not be. 

Page 1, lines 9-19, please rewrite this paragraph as follows: 
The invention is concerned particularly, but not exclusively, with functional apparatus 
which is moveable insofar as the apparatus or a constituent thereof can be removed to a 
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place unknown to the authorised authorized user. It concerns apparatus which is 
physically in the possession of the authorised authorized user, carried thereby (such as a 
cellular telephone or a computing device) or vice versa (such as a motor vehicle), and 
apparatus function-controlling devices, conveniently herein called "key devices", which 
themselves may constitute functional apparatus with a limited degree of functionality 
required to initiate operation of apparatus, and which apparatus or devices may 
nevertheless be snatched from the authoris e d authorized user as a criminal act predicated 
upon the element of surprise and/or menace, where the speed by which the authorised 
authorized user, or victim, is deprived thereof renders the criminal less likely to be 
identifiable and/or the victim less likely to resist and increase the seriousness of the crime 
with personal violence. 

Page 1 , lines 20 - 27, please rewrite this paragraph as follows: 
The invention is particularly concemed with moveable apparatus in the form of a motor 
vehicle in which a driver forms the operator, and which because of its value and/or utility 
to a criminal is an attractive target. Although many vehicles have sophisticated entry- and 
function authorising function-authorizing systems which deny entry to, and/or initiating 
functioning of, the vehicle to any potential operator without the correct key devices, and 
patent specification number GB-A-2342742 exemplifies the level of the measures 
proposed to prevent circumventing use of the correct key devices, the situation still exists 
whereby the person in possession of these key devices is de facto the authoris e d 
authorized user. 
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Page 2, lines 7-11, please rewrite this paragraph as follows: 
It is also known to replace or supplement such physically held key devices by some form 
of personal code which the authorised authorized operator enters into vehicles by a key 
pad or the like which ostensibly mitigates any benefit to a criminal simply taking 
possession of the key devices, but it is believed by some that such a feature may in 
practise practice put both the possessor of the code and robber in increased personal 
danger by confrontation to effect forced divulgence. 

Page 2, line 19 - Page 3, line 2, please rewrite this paragraph as follows: 
Proposals have been made to address the problem of authorised authorized driving way 
of a vehicle as a result of unattended theft or hijacking. P.C.T. Publication No. 
WO 01/32479 describes a system including a cellular phone arrangement whereby in 
addition to notifying the authoris e d authorized operator that an unattended alarm 
condition has been r e cognis e d recognized , it also permits the authorised authorized 
operative, if in possession of a phone, to disable the vehicle remotely; such a system 
would apparently permit the victim of a hijacking also to remotely disable the taken 
vehicle. In a similar manner, U.S. Pat. No. 6,206,130 describes a hand-held security 
system transmitting device by which the authorised authorized operator may actively 
enable or disable functioning of the vehicle remotely, although it must be operated whilst 
while the vehicle is in the vicinity. However, in both of the above, a positive action is 
required in the part of the authorised authorized operator and in the circumstances of a 
hijacking this may not occur to a disorientated victim until it is too late to take appro- 
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priate action. Furthermore, it is likely that a hijacker would force a victim to hand over a 
phone device or other apparent vehicle-specific device to delay reporting of the incident 
to the authorities. 

Page 3, lines 3-12, please rewrite this paragraph as follows: 
U.S. Pat. No. 5,494,130 also addresses the problem of vehicle hijacking by having built 
into the vehicle a driver's seat switch to detect the driver leaving the seat of a functioning 
vehicle and therefrom initiating a delayed immobilisation immobilization of the vehicle 
such that an unsuspecting hijacker creates a separation in space and time from the 
victim/authoris e d victim/authorized operator before the vehicle is fully immobilized 
immobilized . However, insofar as such system may be known by a potential hijacker to 
exist in a particular model of vehicle or be ascertained by inspection, such potential 
hijacker may leam to effect driver transfer without disturbing the switch and/or put the 
authoris e d authorized driver at risk of greater harm by abducting him and forcing him to 
drive to a place where such transfer can be affected or the authorised authorized driver 
forced to part with the details for cancelling immobilisation immobilization . 

Page 3, lines 13-17, please rewrite this paragraph as follows: 
As indicated above, such hijacking or vehicle snatching is one example of separating an 
authoris e d authorized user of functioning apparatus from the apparatus and in order to 
benefit from its functioning. Another is a portable electronic appliance such as a 
computer, communications device, entertainment device or the like that may be taken 
from the custody of an operator when the operator's attention is diverted or even fi-om the 
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person of the operator. 

Page 3, lines 1 8 - 20, please rewrite the following paragraph: 
It is an object of the present invention to provide an authorisation authorization system 
for preventing function of apparatus removed from the presence of an authoris e d 
authorized user that is versatile and readily implemented and less compromising to the 
user's safety than systems known hitherto. 

Page 3, line 21 - Page 4, line 4, please rewrite the following paragraph: 
According the present invention an authorisation authorization system, for permitting 
apparatus functional under the control of an operator to function normally only in the 
presence of an authoris e d authorized user, comprises complementary parts of wireless 
communication means arranged to be carried in operation by the apparatus and an 
authoris e d authorized user of the apparatus and operable to effect, within a spatial 
envelope defining a predetermined permissible working relationship between the 
authorised authorized user and the apparatus, a communication link defined by continual 
transfer, with reference to a temporal envelope, of identifying information pairing the 
authorised authorized user and the apparatus, said commimication means being 
responsive to existence of said link to effect authorisation authorization of the apparatus 
permitting it to function normally under said operator control and to cessation of an 
existing link to functioning apparatus to inhibit normal functioning of the apparatus after 
a delaying interval representative of extended absence of the authoris e d authorized user 
from the apparatus. 
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Page 4, lines 5-10, please rewrite the following paragraph: 
An authorisation system according to the present invention and as defined in the 
preceding paragraphs may advantageously be adapted for use with moveable apparatus 
susceptible to being taken from the possession of the authoris e d authorized user whilst 
functioning, and wherein the delaying interval is chosen having regard to the nature and 
movability of the apparatus to permit a taker of the apparatus to become separated from 
the authoris e d authorized user by a distance sufficient to ensure the safety of the 
authorised authorized user. 

Page 4, lines 11-18, please rewrite the following paragraph: 
Some apparatus, such as electrical devices which do not usually record change of position 
or distance moved, and the apparatus or the authorisation authorization system would 
normally be constructed to measure time and the delaying interval be a function of time 
only. However, this and other [[r]] apparatus, such as a road vehicle, may be equipped to 
measure distance travelled and the delaying interval may be determined as a function of 
distance travelled after separation or from a combination of time and distance. Thus, the 
apparatus or the communication means may include means for measuring distance 
travelled and the communication means is operable to e ff e ct affect the delaying interval 
as a function of distance travelled by the apparatus. 

Page 4, lines 19-23, please rewrite this paragraph as follows: 
Whereas a road vehicle is inherently equipped to measure distance travelled other 
apparatus that is capable of being moved from the authoris e d authorized user, particularly 
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carried away, may include acceleration responsive means carried by the apparatus or the 
conmiunication means and responsive to movement of the apparatus or communication 
means to effect a determination of distance travelled by the apparatus at least during the 
delaying interval. 

Page 4, line 24 - Page 5, line 3, please rewrite this paragraph as follows: 
In the case of moveable apparatus capable of being carried by, and susceptible of being 
taken from the possession of, the authorised authorized user, the acceleration responsive 
means may comprise pedometer mans operable to recognise recognize movement steps 
of the carrier of the apparatus and to compute from a number of r e cognis e d recognized 
steps at least an approximate distance travelled by the apparatus. Furthermore, such 
pedometer means may include calibration means arranged to calibrate the pedometer to 
the stride pattern of the authoris e d authorized user and the apparatus includes means to 
provide to the authoris e d authorized user on demand distance travelled by apparatus 
carried by the authoris e d authorized user during normal functioning of the apparatus. 

Page 6, lines 17-21, please rewrite this paragraph as follows: 
The temporal envelope may comprise at each of sequential communication intervals a 
time window of predetermined duration, and the apparatus part be responsive to receipt 
of identifying information from the user part within each time window to provide 
authorisation authorization of the apparatus until the next window and be responsive to 
absence of identifying information to determine cessation of the communication link. 



-15- 



Page 7, line 2 - Page 8, line 24, please rewrite these p^agraphs as follows: 
An authorisation authorization system according to the present invention is particularly 
suited to permitting use of apparatus comprising a vehicle having an occupants cab and 
an engine and whereby normal function thereof is by an operator who is an occupant and 
driver; the authorisation authorization system then has the spatial envelope defined to 
encompass, and preferably be substantially co-extensive with, the occupants cab and the 
apparatus part is arranged to form a communication link with a user part carried by an 
occupant of the cab and to be operably coupled to the vehicle to authorise authorize or 
inhibit functioning of the vehicle engine by the driver, that is, bring the vehicle to rest and 
inhibit it from further movement. 

Insofar as such a vehicle has its engine supplied with fuel by way of a fiiel delivery 
system, the apparatus part of the system may be arranged to be operably coupled to the 
vehicle to authoris e or inhibit delivery of fiiel to the engine. Additionally or altematively, 
it may be operable to effect said inhibition of normal functioning after a said delaying 
interval by progressively reducing the delivery of fuel to the engine during said delaying 
interval. 

Insofar as an authorisation authorization system according to the invention is not limited 
to specific apparatus, and sudden failure of the apparatus may arouse suspicion, the 
apparatus part may be operable in the delaying interval to effect temporary or permanent 
inhibition of multiple functional aspects of the apparatus to disguise responsibility of any 
particular functional aspect for non- functioning of the apparatus. 
Inhibition of normal functioning comprising a complete cessation of operability, in the 
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case of a vehicle bringing it to rest, may be considered to present an unacceptable safety 
hazard for other road users. As an alternative, the authorisation authorization system may 
authorise authorize the vehicle to travel at any speed demanded by the driver or to inhibit 
the vehicle from travelling in excess of a speed set by the system at the end of the 
delaying interval. The speed may be predetermined or the authorisation system may have 
the apparatus or communication means part include means for deriving a speed function 
related to any speed achieved during the delaying interval and at the end of the delaying 
interval to inhibit the vehicle from exceeding a speed that is a fraction of any speed 
represented by said speed fiinction 

If the authorisation authorization system is employed for apparatus having a telephone 
communication ability, the apparatus part may be operable during said delaying interval 
to effect a telephone call to a predetermined recipient. 

When the authorisation authorization system is adapted for use with apparatus such as the 
aforementioned vehicle in which operation of the apparatus is initiated by the operator 
prior to effecting control of functioning thereof, the apparatus part may be responsive to 
initiation of operation of the apparatus by the operator to initiate establishment of the 
communication link prior to, or contemporaneously with, functioning of the apparatus. 
The apparatus part of the authorisation authorization system may be arranged to be 
carried by the apparatus in functioning but removable when it is not intended to function 
and in such circumstances may include apparatus operation initiation means operable to 
permit initial operation of the apparatus. 

An authorisation authorization system according to the invention may have the communi- 
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cation means include a relay part arranged to be disposed, in respect of the communica- 
tion link, between the user part and apparatus part and wherein at least the user part is 
arranged to transfer identifying information by way of the relay part in preference to 
establishing a communication link with the apparatus part directly. The communication 
means may be arranged to attempt to establish a conmiunication link including the relay 
part and in absence thereof to establish a communication like directly between the user 
part and the apparatus part. 

The relay part is arranged to be carried by the user in operation, and it may include, or be 
included in, additional functional apparatus under the control of the authorised authorized 
user and the relay part is arranged to effect, in response to cessation of an existing com- 
munication link with the user part of the communication means during functioning of the 
additional apparatus, inhibition of normal functioning after a delaying interval. 

Page 9, line 1 - Page 10, line 19, please rewrite these paragraphs as follows: 
FIG. 1(a) is a sectional elevation through a road vehicle having an engine and occupant 
cab and operated by a driver occupant, and illustrating in schematic form an authorisation 
authorization system in accordance with the present invention, 

FIG. 1(b) is an enlarged view of the ringed portion of FIG. 1(a) showing in greater detail 
a physical layout of the authorisation authorization system having communication means 
comprising a user part carried by the authoris e d authorized user and apparatus part 
carried by the vehicle and interfacing with engine operating components, 
FIG. 2 is a schematic block circuit diagram of a first form of authorisation authorization 
system in accordance with the present invention incorporating uni-directional transmis- 
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sion from the user part to the apparatus part to effect a communication link between 
them, 

FIGS. 3(a) and 3(b) are graphical representations of transmission and reception windows 
defining a temporal envelope for continual transmission, 

FIG. 4 is a schematic block circuit diagram of a second form of authorisation authoriza- 
tion system in accordance with the present invention incorporating bi-directional trans- 
mission from the user part to the apparatus part, 

FIG. 5 is a schematic block circuit diagram of a third form of authorisation authorization 
system in accordance with the present invention incorporating bi-directional transmission 
by way of a user part having an unpowered identification tag structure, 
FIG. 6 is a schematic block circuit diagram of a fourth form of authorisation authoriza- 
tion system, generally similar to that of FIG. 4, but in which the communication means 
incorporates also a relay part in the communication link between the user and apparatus 
parts, and wherein the relay part comprises further functional apparatus, 
FIG. 7 is a schematic block circuit diagram of a fifth form of authorisation authorization 
system in which the user part of the communication means comprises, as discrete 
modules, a master module to effect the communication link with the apparatus part and 
upon interruption delayed inhibition of normal functioning, and one or more supple- 
mentary modules associated with optional additional functions of the apparatus which 
effect authorisation authorization thereof by way of communication links with the master 
module, the additional authorisations authorizations being in accordance with possession 
of appropriate supplementary modules, and^ 
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FIG. 8 is a schematic block circuit diagram of a sixth form of authorisation system in 
which the user part of the communication means comprises, as discrete modules, a master 
module to effect the communication link with the apparatus part and upon interruption 
delayed inhibition of normal functioning, and one or more supplementary modules, 
associated with optional supplementary functional features of the apparatus not critical to 
its normal functioning, which effect authorisation thereof by way of communication links 
with the apparatus part, the additional authorisations being in accordance with possession 
of appropriate supplementary modules. 

Referring to FIG. 1 (a) a vehicle 10 comprises apparatus which functions normally, that 
is, in respect of performing those functions normally required of it, under the control of 
an operator 12 who is more conventionally called the driver. The vehicle is moveable and 
includes a cab 14 which typically has seats for a plurality of occupants 12.sub.i including 
the driver. Whereas for normal functions the vehicle is under the direct control of the 
driver, the functioning of the vehicle may be authorised authorized by any user of the 
vehicle occupying of the cab, that is, the driver or another occupant sub - authorismg sub- 
authorizing the driver. 

Page 11, line 2 - Page 15, line 15, please rewrite these paragraphs as tbllows: 
To complete the overview of the vehicle as apparatus under the direct control of an 
operator-driver, such operator effects operation by initiating fiinctioning of both the 
vehicle chassis and of the engine by which the vehicle moves. Initiation of operation 
usually is effected by inserting a key device 26.sub.l into a co-operable lock 26.sub.2 
which releases a steering lock (not shown) and authoris e s authorizes the EMU 20 to 
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enable the engine to be started and the supply pump 23 to deliver fuel for the engine. The 
key device 26 1 may take the form of a physical key 27 1 paired with a lock 28 1 fitted to the 
vehicle and optionally carry in the key radio jfrequency transducing means 272, paired 
with transceiver 282 in the vehicle. In the manner disclosed inter alia in GB-A-2342742 
the transceiving means is arranged to program the key m use, issuing it with a code to be 
transmitted upon next usage so that only if the codes agree does the key function to 
initiate operation of the engine, and for practical purposes making it virtually impossible 
to start the engine without permission of the genuine or authorised authorized key. 
An alternative key device, as shown ghosted at 29i, employs a key-card of flexible 
plastics material and carrying thereon authorising authorizing means, in the form of a 
magnetic strip or a semi-conductor integrated circuit including a processor and memory 
and often known to as a smart-card, which is able to co-operate with a reader 292 fitted to 
the vehicle. Such a card-key is able to store a larger number of parameters vital to 
initiating operation of the engine, and may also be re-programmed from usage-to-usage, 
but nevertheless serves as a key device to effect initiation of vehicle engine operation by 
virtue of being in the possession of the user at start-up and in position in the vehicle 
thereafter. 

As outlined above, such in-situ programming of the primary engine initiating device (key, 
key-card) is intended to make it difficult for an unauthoris e d authorized user to tamper 
with the vehicle, particularly the EMU in order to start the engine and steal the vehicle, or 
as additional anti-theft devices which respond to an attempt at unauthoris e d unauthorized 
entry into the vehicle cab or engine bay or even disturbance of the vehicle itself to trigger 
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an alarm. 

Known arrangements for ensuring that the vehicle, through its engine, functions normally 
only for the driver in possession of the appropriate key device, have the effect, as 
discussed above, of treating the possessor of the key device as the authori s ed authorized 
user and it leads to the situation where a criminal is tempted to steal the appropriate key 
device for the vehicle, and further encouraged to ensure the key device is correctly 
authoris e d authorized by separating the key device from the owner at a time when the 
owner is in the vicinity of the vehicle, or has it fully functioning in the process of being 
driven; that is, hijacking. 

In accordance with the present invention there is introduced an authorisation authoriza- 
tion system, indicated generally at 30, with the intention of permitting functioning of the 
vehicle normally under driver control only in the actual presence of an authoris e d 
authorized user, rather than merely the presence of the normal key devices which hitherto 
has constituted de-facto authorisation authorization . In this embodiment an authoris e d 
authorized user may be any occupant 12\ of the vehicle cab, conveniently, but not 
necessarily, the driver 12, and presence is that defined by presence within or immediately 
adjacent the vehicle cab. 

In general terms, the authorisation authorization system comprises wireless conmiunica- 
tion means 32 having complementary parts 34 and 36 arranged to be carried in operation 
by the apparatus (the vehicle) and a said authoris e d authorized user of the apparatus (here 
shown as driver 12) respectively. The parts may communicate by any suitable contactless 
system, such as optically or ultrasonically, but preferably operate at radio frequencies and 
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preferably at those in the GHz or microwave bands. 

The parts of the communication means, conveniently referred to as the "apparatus" or 
"apparatus-carried" part 34, and "user" or "user-carried" part 36, are arranged to effect, 
within the spatial envelope of the cab that defines a permissible working relationship 
between the authoris e d authorized user and apparatus (vehicle), a communication link 
defined by continual transfer of identifying information pairing th e authoris e d authorized 
user and the apparatus. The identifying information is described further below as is the 
nature of continual transfer, being with respect to a temporal envelope which supple- 
ments the spatial envelope defining permissible separation of the parts. 
The communication means 32 is responsive to the existence of said link that confirms the 
"presence" of th e authorised authorized user to effect authorisation authorization of the 
vehicle, permitting it to function normally under control of a driver-operator in 
possession of the appropriate key device, but to deny authorisation authorisation when 
not present, preventing a driver who is not the authorised authorized user from using the 
key device obtaining or maintaining functioning of the engine of the vehicle. 
Initiation of operation of the vehicle may be effected separately from, or contingent upon, 
such communication link, but most importantly, the communication means is responsive 
to cessation of an existmg communication link with previously authoris e d authorized said 
functioning apparatus to inhibit the normal functioning of the apparatus after a delaying 
interval that is characteristic of the authori s ed authorized user and vehicle as having 
moved apart. In this embodiment the delaying interval is a time delay of duration in 
excess of 0.5 minutes and may typically be of the order of 5 minutes, although other time 
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delays, may be set according to anticipated or actual conditions pertaining. 
This embodiment is particularly concemed with, and adapted for, an above-discussed 
hijack situation wherein the fully functioning vehicle, containing the authorised 
authorized user and driver, is halted and the occupant or occupants forced to leave, and 
possibly compounded by the hijacker then removing from the erstwhile occupants any 
cellular telephone or comparable communication devices by which the authorities may be 
alerted before driving away in the otherwise functioning vehicle. 
To this end, the user part 36 of the communication means 32 is arranged to be wom 
inconspicuously or secreted about the person of the authorised authorized user, and 
notwithstanding the requirement for such part to effect a radio communication link with 
the apparatus part, this is feasible having regard to the relatively small spatial envelope in 
which a communication link has to be established with the apparatus part. 
The apparatus part 34 may be permanently fixed with respect to the vehicle to control its 
engine operation or fixed with respect to, or form part of, an operating key device, such 
as key 21 \ or key card 29i, which is, in operation, carried by the vehicle and without 
which device it will not function. 

In normal use of the vehicle, that is, absent any hijacking situation, the authoris e d 
authorized user, carrying the user part of the communication means, upon entering the 
spatial envelope defined substantially by the vehicle cab creates the circumstances 
whereby the communication means may form a communication link between the user- 
part and apparatus part, which link is considered maintained by the continual transfer of 
identifying information pairing the authoris e d authorized user and vehicle to the 
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apparatus part. The communication means may exist because of permanent or prior 
empowerment of the relevant part or parts, or may result from empowerment arising from 
the driver using the appropriate key device to initiate functioning of the engine. 
Notwithstanding various options discussed below, by combination of a function- 
authoris e d authorized wireless communication link and key device-enabled operation of 
the vehicle engine, the vehicle is set to fiinction normally without any additional overt 
actions necessary on the part of the authoris e d authorized user, other than his presence. 
Insofar as the communication link between apparatus and user parts and initiating 
operational functioning of the vehicle are closely bound, they may be combined or kept 
totally separate. The apparatus and/or user parts may begin to transmit upon disarming of 
an anti-theft device that permits the authoris e d authorized user to enter the cab. Subse- 
quent initiation of engine operation is contingent upon establishment of the communica- 
tion link. Alternatively, the apparatus part may be caused to function when operation of 
the vehicle ignition is initiated by the normal key devices but before the engine starts, the 
completion of operating engine fimction being contingent upon the establishment of a 
communication link during the procedure. Yet an alternative method is to permit the 
engine to function by the normal key devices but with the apparatus part arranged to 
initiate inhibition if a communication link is not established within a relatively short time 
delay that is insufficient for the driver to move the vehicle to a place of danger before 
functioning ceases. 

As an altemative configuration, the user part may be connectable physically with the 
vehicle and/or the apparatus part in order to interchange stored values of identifying 
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codes and establish the communication link and/or to permit initiation of engine function 
which is maintained after the user part is removed and returned to the person of the 
authoris e d authorized user to be carried thereabout. 

Thus, in such a hijack situation, and depending upon how precisely the spatial envelope 
of the communication link between the user part and the apparatus part is defined, upon 
the authorised user leaving the vehicle cab and the vicinity of the vehicle (distancing 
himself therefrom or having the vehicle drive away) there is a cessation of the 
authorisation authorization communication link to the functioning vehicle. 
The apparatus part 34 of the communication means is functionally connected to the 
vehicle, to cause the vehicle to stop functioning after a time delay of such duration as to 
permit the hijacker to become separated from the authorised authorized user. The time 
delay as used in this embodiment not only permits the hijacker to move the vehicle from 
the hijack scene for a distance that is intended to be too great to justify returning to 
confront the authorised authorized user but also an opportunity for the authoris e d 
authorized user to leave the hijack scene. The vehicle is stopped from functioning at the 
appropriate time either by affecting the operation of one or more components of the 
vehicle that causes the vehicle (engine or chassis) to stop suddenly or by modifying 
operation of one or more components so that functionality is removed from the vehicle 
more gradually over at least part of the delay interval. The engine may also be caused to 
stop functioning by effecting temporary, intermittent inhibition of multiple functional 
aspects of the vehicle to disguise from the hijacker responsibility of any particular 
functional aspect for non-functioning of the vehicle, and thus thwarting by-passing of the 
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control for that functional aspect. 

Page 15, line 24 - Page 16, line 3, please rewrite this paragraph as follows: 
On the assumption that the authorised authorized user will eventually be re-united with a 
non-functioning vehicle abandoned by a hijacker, the conununication means may be 
arranged to respond to a resumed presence of the user part to re-establish the communi- 
cation link that retums full functionality to the vehicle, but preferably the apparatus part 
is arranged to lock the inhibition of vehicle functionality at least until some positive 
action is taken to remove the inhibition. A vehicle would have its functionality locked out 
on a temporary basis, to be overcome by locally or remotely controlled re-setting switch 
means, but other apparatus, depending largely upon the structural form of the apparatus 
part, may have its functionality locked on a temporary or permanent basis, user will 
eventually be re-united with a non-functioning vehicle abandoned by a hijacker, the 
communication means may be arranged to respond to a resumed presence of the user part 
to re-establish the conmiunication link that retums full functionality to the vehicle, but 
preferably the apparatus part is arranged to lock the inhibition of vehicle functionality at 
least until some positive action is taken to remove the inhibition. A vehicle would have 
its functionality locked out on a temporary basis, to be overcome by locally or remotely 
controlled re-setting switch means, but other apparatus, depending largely upon the 
structural form of the apparatus part, may have its functionality locked on a temporary or 
permanent basis. 

Page 16, lines 8-11, please rewrite the following paragraph: 
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The apparatus part of the commxmication means may also include authoris e d authorized 
disablement means to override the authorisation authorization system when the vehicle is 
in the care of trusted non authoris e d non-authorized users, conveniently associated with 
such re-setting means or as a replacement "master key" device. 

Page 17, line 16 ~ Page 18, line 2, please rewrite these paragraphs as follows: 
Existence of such communication link is notified to the control means 38i which in turn 
authori s es authorizes functioning of the vehicle by removing a default inhibition of the 
EMU and/or fuel supply pump 23 that prevents vehicle function by way of the normal 
driver key device. 

The transmitting power or directionality of the user transmission means and/or the 
receiving sensitivity or directionality of the apparatus reception means combine to define 
the spatial envelope upon which a successful commxmication link is based. 
As discussed above, it is continuity of an established communication link that is of 
importance to authoris e authorize functioning of the vehicle and cessation of the 
established link to remove authorisation authorization in a time delayed manner, and to 
this end the continued existence of the link is defined not only by the dispositions of the 
user transmission means and apparatus reception means relative to the spatial envelope 
but also by transmission and reception with respect to a temporal envelope whereby 
transmissions are considered to be continually made and received so as to satisfy the 
criterion of existence of a communication link that sustains authorisation authorization , 
even if intermittent and discontinuous. 
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Page 18, lines 12-17, please rewrite this paragraph as follows: 
Although it is possible hypothetically to pre-define matching communication intervals 
and windows within the user and apparatus processing means, in practice it is difficult to 
keep them synchronis e d synchronized if they operate completely independently, and each 
received (and confirmed) transmission may be used to synchronise the apparatus process- 
ing means with respect to the user processing means and/or the transmitted identity refer- 
ence may contain data defining the relative time to, and duration of, the next transmis- 
sion. 

Page 18, line 23 - Page 19, line 11, please rewrite these paragraphs as follows: 
It will be appreciated that the above described communication means 32i, with its 
apparatus and user parts 34i and 36\ has simplicity in having a single transmitter and 
receiver, but also some limitation, such as the need to determine in advance what the user 
transmission means is to transmit and when and for the apparatus reception means to be 
set in advance, or adapt to received transmissions, to pair therewith. Also, insofar as it is 
intended for the user part 36i to be carried unobtmsively by the authoris e d authorized 
user, the self-contained power supply 44 1 is necessarily of limited capacity and notwith- 
standing only intermittent transmissions may require the user to effect manual switching 
of the part for use. 

Such restrictions may be overcome wholly or in part by effecting the communication link 
by way of bi-directional communication between the apparatus part and the user part. 
Referring now to FIG. 4, this shows for a second embodiment of authorisation authoriza- 
tion system communication means 322 comprising apparatus part 342 and user part 362, It 
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will be seen that the parts 342 and 362 are in many respects the same as the parts 34i and 
36] and the commonly used elements will be referred to with corresponding reference 
numbers (other than the suffixes) md not described again unless differing in some 
respect. The apparatus part 36i includes in association with the apparatus processing 
means 562 apparatus transmission means 6O2 and the user part 34i includes in association 
with the user processing means 462 user reception means 7O2. 

Page 20, lines 2-18, please rewrite the following paragraph: 
Furthermore, the radio frequency energy of apparatus part transmissions may be 
employed by the user part 362 to provide or supplement the operating power of its supply 
442; that is, the user reception means may include rectification means 722 for a part of the 
signal and charge a secondary battery source or, in some instances, a capacitor (not 
shown) that replaces such primary or secondary battery source. Depending upon the 
storage capacity of the power supply 442, the receipt or lack of receipt of signals from the 
apparatus transmission means may comprise direct control over the user part's ability to 
effect a response transmission. Alternatively, the user processing means 462 may put the 
user part into a low consumption "sleep" mode until awoken by receipt of a suitably 
verified transmission from the apparatus part. To this end, the bi-directional arrangement 
may comprise the functional equivalent of the above-described unidirectional 
communication link in which the user part is autonomous in sending an appropriate 
authorisation authorization signal to the apparatus part but relies upon a signal of 
indeterminate form from the apparatus part to derive operating power. In general 
however, it is preferred to take advantage of any transmission from the apparatus part to 
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the user part to carry information unique to the apparatus or pair that prevents 
empowerment ot the user part by extraneous sources. 

Page 21, lines 14 - 23, please rewrite the following paragraph: 
As discussed, the apparatus part expects receipt of an appropriate piece of identifying 
information within each time window and such receipt within each time window to 
provide authorisation authorization of the apparatus of the apparatus until the next 
window. If that information is not forthcoming, because the paired user part is not within 
range, as defined by the spatial envelope manifested by incorrect modulation information 
or insufficient received signal strength, the apparatus part, through the control means 
38.sub.l initiates a check for the absence of receipt of identifying information in a 
predetermined number of consecutive time windows to determine if it was a temporary 
loss or permanent. If such check confirms absence for said predetermined number of 
consecutive time windows, a cessation of communication link is declared to exist and 
delayed loss of vehicle function initiated. 

Page 22, lines 14-20, please rewrite the following paragraph: 
It will be appreciated that for any apparatus part, it may be arranged to be paired with a 
plurality of different user parts and likewise for any user part to be paired with a plurality 
of different apparatus parts, and although it would be expected for the apparatus part to 
pair with a single user part to define a communication link by cycling through possible 
user parts to pair with upon initiation, the setting up of a communication link based upon 
intermittent transmission-reception windows makes it possible to accommodate several 
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authorised authorized user parts for one apparatus part simultaneously. 

Page 22, line 24 - Page 25, last line, please rewrite these paragraphs as follows: 
For apparatus normally carried by an authorised authorized user, and susceptible of being 
taken from [[th]] the user, such as a cellular telephone, entertainment or computing 
device, that does not usually have means for measuring distance travelled, such means 
may be provided by the apparatus or commimication means carrying acceleration 
responsive means that responds to continuous or periodic acceleration forces and 
computes therefrom a distance travelled. This may be in response to cessation of 
communication link and for comparison with a predetermined or otherwise computed 
distance that denotes the end of the delaying interval. For a vehicle, the acceleration 
responsive means may comprise, a linear accelerometer. For apparatus normally carried 
by the user the acceleration responsive means may comprise a pedometer sensor of the 
type that is carried by an individual and responds to the acceleration pattern of 
ambulating, that is, walking and/or running, coupled with user stride length, to determine 
how much groimd has been covered by the individual walking and/or running. This may 
happen without the authorised authorized user being aware of the additional feature 
within the apparatus. More usefully, however, the pedometer function is advertised as a 
feature of the protected apparatus that is normally carried by the user and incorporated 
into it to effect, in addition to its normal function, that of a pedometer informing the user 
of ambulatory behaviour behavior including also means to calibrate it according to 
the stride/pattem of the authorised authorized user and providing information on 
demand. 
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Irrespectively of whether the device functions as a user-controlled, or even user-aware 
pedometer, it may be arranged to respond to cessation of a communication link between 
the apparatus and authorised authorized user to adopt a "standard" stride pattern and 
monitor thereby achievement of a separation distance. 

Alternatively, such determination of speed and distance may be employed to calculate a 
delaying interval time before inhibiting functionality. 

Furthermore, both time and distance may be employed as parameters, for example, 
inhibition may be effected only after a time delay of, say, at least 0.5 min and a distance 
travelled of at least 0.8 Km (0.5 mile), the actual values being a matter of choice and 
dependant upon the apparatus involved. 

Also, it will be appreciated that although as described above the function of the ixser part 
of the communication means is to inhibit normal functioning of the apparatus insofar as 
the apparatus then becomes non-functional to an extent that precludes its effective use by 
an authoris e d authorized operator, in many cases any particular apparatus has different 
degrees of functionality, or functional features, not critical to normal function of the 
apparatus but over which it may be desired to exert control by use of the communication 
means. 

For instance, the apparatus may be a vehicle to which a speed limit is enforced for 
different categories of authorised authorized user, with possibly a minimum speed limit 
for an authorised authorized user, or a computer to which certain programs are available 
to different categories of authoris e d authorized user. 

For a vehicle, for which it is determined that complete removal of functionality, that is, 

-33- 



making it immobile, is unsuitable, the authorisation authorization system may effect 
control of the engine, by way of electrical ignition or fuel supply, to set a maximum 
speed that the vehicle cannot exceed, such speed being low relative to that normally 
experienced by other road users so as both to limit the rate of departure and make the 
vehicle more noticeable to other road users and the authorities, without risking it 
becoming stranded in a dangerous place. 

The apparatus part may be arranged such that the speed limitation is a predetermined 
default setting that is overridden by the communication link with the authoris e d 
authorized user to provide said normal operation not inhibited in this way, that is, it may 
take a fixed value, for example 25 Km/h (15 mph) that most drivers exceed where 
practicable. However, in congested urban areas traffic flow may occasionally be at a 
lesser speed. To this end, the vehicle may monitor the maximum or average speed within 
a time frame to compute a running average before and/or preferably after cessation of the 
communication link in order to derive a truer speed profile or function that is normal for 
the road conditions prevailing for the thief, so that after the delaying interval the speed is 
set to a fraction of the norm. 

Insofar as other apparatus may be traceable through its continuing to function at some 
level, an analogous operating speed limit may be imposed to render the apparatus 
traceable whislt while of little economic value to the taker. 

Insofar as the authorisation authorization system may impose a variety of functional 
inhibitions on the apparatus at the end of the delaying interval it may also function to 
effect different degrees of inhibition to authoris e d authorized users having different levels 
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of authority. Thus the user part of the communication means may be programmable or be 
constructed to different forms to permit different levels or categories of authorisation 
authorization of specific apparatus. 

However, in accordance with fourth and fifth embodiments of the invention shown in 
FIGS. 6 and 7 respectively, the user part comprises a plurality of discrete modules each 
of which is carried by an authorised authorized user to have effect. 
Referring to FIG, 6 shows in block a schematic form at 3O4 a fourth embodiment of 
authorisation authorization system in accordance with the invention wherein the 
communication means 324 comprises, in addition to the user and apparatus parts 364 and 
344, corresponding to parts 362 and 342 described above. The user part 364 comprises a 
master module 364m that performs the authorisation authorization of apparatus normal 
functioning as described above. There is also at least one supplementary module 36451 
which authoris e s authorizes a supplementary functional feature of the apparatus, say, the 
removal of a vehicle speed limit, to a user in position of it as well as the master module. 
The, or each, supplementary module is associated with a specific feature of the apparatus 
not critical to its normal function and is operable to effect a communication link with the 
master module in any of the ways described above for communication between user part 
and apparatus part, the communication means as a whole being responsive to absence of 
a communication link between a said supplementary module and master module to inhibit 
function of the associated feature within the functioning apparatus. 
Alternatively, and as shown in FIG. 7 for a fifth embodiment of authorisation authoriza- 
tion system 325, the user part 365 comprises a master module 365M and at least one 
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supplementary module 36ssi etc. having associated therewith a specific supplementary 
functional feature of the functioning apparatus not critical to its normal functioning. This 
differs from the arrangement of FIG. 6 in that at least one supplementary module is 
operable to effect a supplementary conmiunication link with the apparatus part rather 
than the master module and the conmiunication means as a whole is responsive to 
absence of a communication link between a said supplementary module and the apparatus 
part to inhibit operation of the associated supplementary functional feature. 

Page 26, line 1 1 - Page 29, last line, please rewrite these paragraphs as follows: 
To further facilitate achievement of such desiderata for the user part, reference is made to 
FIG. 8 which shows in block a schematic form at 306 a sixth embodiment of authorisation 
authorization system in accordance with the invention wherein the communication means 
326 comprises, in addition to the user and apparatus parts 366 and 346, corresponding to 
parts 362 and 342 described above, a relay part 806 arranged to be disposed, in respect of 
the communication link, between the parts wherein at least the user part 366, and 
preferably also the apparatus part 346, is arranged to transfer identifying information by 
way of the relay part in preference to establishing a communication link directly. 
As illustrated in the Figure, the relay part is arranged to be carried by the authorised 
authorized user 1 2 in operation and may be less unobtrusive than the user part 366 and 
including a more powerful a battery power supply and transmission means and, if 
appropriate, receiver means, for communicating over a distance with respect to the 
apparatus part that is long relative to the distance to the user part, thereby permitting the 
user part to be made even smaller and carried more unobtrusively. 
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The relay part is under the physical control of the authoris e d authorized user and may 
advantageously comprise additional functioning apparatus, such as a cellular phone 
device, which inherently includes many of the components required of the relay part, and 
from which the user also runs the risk of being separated, not only when forcibly 
separated form the vehicle by a hijacker but also when the apparatus is carried by the user 
remotely from the vehicle. 

The communication link is thus effected by transmission from the user part to the relay 
part and from the relay part to the apparatus part, so that if, having established such link 
by virtue of the relay-carrying authorised authorized user correctly initiating functioning 
of the apparatus, any cessation of the link caused by either or both of the user and relay 
parts being separated from the apparatus part or each other causes delayed inhibition of 
vehicle functioning. 

Although fimdamentally it is only necessary for the relay part to be present in respect of 
transmissions from the user part to apparatus part, insofar as any link is bi-directional and 
carries identifying information unique to the transmission, it is preferred that the relay 
part encompasses full bi-directional communications with at least the user part, and many 
cellular phones are already enabled to communicate with local devices using the above- 
mentioned Bluetooth® technology. However, the communication means may be arranged 
such that notwithstanding the presence of a relay part, any communication link between 
user and apparatus parts is not contingent upon the presence of such relay part; that is, if 
the relay part is present and functioning then it is employed in establishing the 
communication link but if it is not present and functioning the apparatus and user parts 
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nevertheless attempt to communicate directly. It will be appreciated that if appropriate 
the relay part may form part of the transmission path from the user part and apparatus 
part and for the apparatus part, with fewer power constraints, transmit directly with the 
user part. 

It will be appreciated that a functioning cellular phone or the like which is normally 
carried on the person of the authorised authorized user when away from the vehicle, may 
be disposed in the vicinity of, rather than on the person of, the authoris e d authorized user 
when the latter is within the vehicle but may nevertheless be employed as such relay part 
without affecting ftinctionality of both cellular phone and vehicle. 
It will be furthermore appreciated that additional functioning apparatus suitable for use as 
the relay part may comprise a so-called hand-held or lap-top computer, watch or 
entertainment device, any of which may be carried by, and at risk of being taken from, an 
authoris e d authorized user. Any such device is particularly suitable if, as mentioned 
above, it is enabled for wireless peer-to-peer networking using the Bluetooth® or like 
system. Such relay part may, of course, have no other function than to operate as a relay 
part. 

It will also be appreciated that notwithstanding the above description of ftinctional 
apparatus as being a vehicle and "additional" functioning apparatus as a relay part in 
forming a communication link therewith, such additional functioning and communicating 
apparatus as normally carried by the authoris e d authorized user may constitute the 
ftmctioning apparatus which is the authorisation authorization system is for, either in 
conjunction with it being such a relay part or alone. That is, such a cellular phone, 
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computer, watch or the like which is normally carried in an enabled, functioning state by 
an authorised authorized user may comprise apparatus part and form a communication 
link with a discreetly carried user part, directly or relayed through other such functioning 
apparatus, whereby separation of the authorised authorized user from this or any 
functioning apparatus creates a delayed inhibition of its functioning. Depending upon the 
nature of the apparatus, mentioned above, the duration of the delay is chosen to permit 
the authorised authorized user to become distanced from a robber of such apparatus. 
Furthermore, initiation of the delay may cause telephonically enabled apparatus to call a 
prescribed number with a prescribed message (possibly to the authorities or network 
administrator to cancel the subscription) and the inhibition of function may comprise 
permanent removal of functionality, such as destruction of a cellular phone network SIM 
card. 

In addition to having movable fiinctional apparatus taken from an authoris e d authorized 
user by robbery, it is often the case that such authorised authorized user puts down such 
functioning apparatus and leaves its vicinity, inadvertently exceeding the permissible 
working relationship. In many instances there is a significant difference between leaving 
apparatus which is not functioning and leaving apparatus which is, insofar as any key 
devices or equivalent codes or passwords have been applied and permit any unauthorised 
unauthorized person to use its functions and, in many cases, extract information from it 
with or without removing the apparatus. 

It will be understood that an analogous situation may apply to non-movable apparatus 
which nevertheless is caused to function by an op e rator/authorised operator/authorized 
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user who may inadvertently exceed an acceptably permissible working distance and leave 
the fnnctioning apparatus open to mis-use, including extracting contents, physical or 
intellectual. Thus in accordance with the present invention, whatever the functional 
apparatus, if the authoris e d authorized user leaves the functioning apparatus to such 
extent that the spatial and/or temporal envelope is transgressed and communication link 
between them ceases, at least the apparatus ceases to function to the benefit of an 
unauthoris e d unauthorized person. In a scenario where the authorised authorized user is 
unlikely to be separated from the apparatus by robbery, the apparatus part may be 
sensibly arranged to abort delayed inhibition in response to re-establishment of 
communication link, so that this is transparent to the authorised authorized user, or 
altematively, require the authorised authorized user to perform some partial or complete 
re authorisation re-authorization as a deterrent to leaving the apparatus functioning. 
Furthermore, apparatus other than an automobile as described above may be configured 
to work with master and supplementary modules that enable a suitably authoris e d 
authorized user, in possession of the relevant module or modules, to access functions not 
otherwise accessible beyond the basic functionality given by the master module. 
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